$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e.cer File: 53691b85-8428-42e5-92a1-4f4a6c808f1e.cer (raw, json) Hash identifier: Sdq/kIqRyV2m38icn1i5GCro1QrP0i75p+CP/v1AIg4= Subject key identifier: 25:48:56:4F:D4:2D:DF:16:B6:2E:30:61:25:2F:07:57:D5:3E:D7:B5 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F1CC0214CDCDF6B5FF4E2FA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e/53691b85-8428-42e5-92a1-4f4a6c808f1e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Sep 2026 00:45:12 +0000 Certificate not after: Tue 12 Dec 2028 01:45:12 +0000 Subordinate resources: AS: 398484 IP: 204.238.255.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c0:21:4c:dc:df:6b:5f:f4:e2:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 9 00:45:12 2026 GMT Not After : Dec 12 01:45:12 2028 GMT Subject: CN=53691b85-8428-42e5-92a1-4f4a6c808f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:74:e5:98:64:7f:c7:ae:d2:82:b2:0d:89: cb:b6:cd:86:29:fd:5b:5b:d9:29:a8:6e:1e:70:a8: 7a:b5:fe:b6:93:04:64:a7:10:c0:4f:20:ef:d0:93: 94:83:a3:51:c1:37:cb:9e:06:a4:00:4f:df:69:4b: ae:8f:61:31:83:a9:a3:16:a8:57:78:46:5e:1a:5e: 3b:cd:76:6c:39:fc:c8:45:39:71:c7:32:f7:84:b1: 7d:42:d2:be:e5:a6:7a:c5:c9:31:a4:6d:b4:6c:27: c2:ba:2b:92:71:7a:f5:4c:a7:6d:b7:68:c0:6e:a4: cc:0b:d0:1e:bd:6d:5c:3a:5b:86:35:15:bc:36:84: f7:f5:6e:1a:15:a7:f7:9d:3b:ff:30:d0:6e:eb:42: 66:4c:a3:c6:3b:83:b9:25:91:66:c7:62:7c:2a:68: de:fe:ae:8e:2b:83:88:85:43:8d:87:96:93:33:6d: 5b:83:fa:16:ef:57:30:72:6b:c8:f3:d1:b0:e6:41: 1d:eb:36:8d:c7:aa:ac:ba:52:ad:cf:4a:88:29:22: 0b:76:3f:1b:d8:67:50:c0:f7:f8:50:84:9a:32:98: 26:55:d8:c6:95:a6:34:fa:ed:b8:e6:8b:e0:10:c2: a6:3b:92:8a:55:7a:36:89:55:c8:af:0b:ea:f0:d8: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:48:56:4F:D4:2D:DF:16:B6:2E:30:61:25:2F:07:57:D5:3E:D7:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/53691b85-8428-42e5-92a1-4f4a6c808f1e/53691b85-8428-42e5-92a1-4f4a6c808f1e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 204.238.255.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398484 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b8:af:ce:73:dc:47:44:c9:77:04:c9:b7:30:ad:00:f9:b1: d4:ba:ba:5d:8c:9a:ca:ef:c9:b3:4f:f3:34:67:99:ae:ca:c0: 92:36:f8:e0:4e:1e:0f:88:88:0a:b9:92:54:8a:cd:ee:65:66: 7e:1d:f6:41:cb:a0:97:b1:cc:5c:9e:47:43:26:1f:29:d5:79: d4:29:e0:41:44:64:4d:06:ea:72:83:af:f1:cd:fb:32:77:ab: 01:ca:8b:39:dd:14:ac:6a:c1:06:68:3c:90:81:24:84:98:10: ee:42:25:6b:15:95:8c:8c:f7:bc:a8:14:35:35:6d:6a:8e:3b: da:40:15:7a:36:1e:c5:17:31:95:39:82:91:28:e3:c1:b9:22: cb:e7:a3:d3:9b:d4:50:44:a7:66:10:71:4f:e6:96:75:d3:f1: 69:b5:ac:2c:bb:28:72:93:0f:a0:dc:12:62:eb:64:86:27:23: 8d:01:5b:ad:d7:19:7d:e1:cc:f1:a7:fa:9e:3e:07:23:2a:d7: c9:e5:dd:28:29:4b:26:e0:93:87:ec:1b:e0:68:a1:b2:cd:2d: 07:13:89:de:ea:45:2b:2d:5f:29:16:e2:31:35:ed:32:3a:84: 5b:70:f7:9a:fd:2b:99:9b:57:e3:e2:7a:4d:6d:3d:1f:53:b7: fd:bf:ab:6a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE8cwCFM3N9rX/Ti+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkwOTAwNDUxMloXDTI4MTIxMjAxNDUxMlowLzEtMCsGA1UEAxMk NTM2OTFiODUtODQyOC00MmU1LTkyYTEtNGY0YTZjODA4ZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve505Zhkf8eu0oKyDYnLts2GKf1bW9kpqG4e cKh6tf62kwRkpxDATyDv0JOUg6NRwTfLngakAE/faUuuj2Exg6mjFqhXeEZeGl47 zXZsOfzIRTlxxzL3hLF9QtK+5aZ6xckxpG20bCfCuiuScXr1TKdtt2jAbqTMC9Ae vW1cOluGNRW8NoT39W4aFaf3nTv/MNBu60JmTKPGO4O5JZFmx2J8Kmje/q6OK4OI hUONh5aTM21bg/oW71cwcmvI89Gw5kEd6zaNx6qsulKtz0qIKSILdj8b2GdQwPf4 UISaMpgmVdjGlaY0+u245ovgEMKmO5KKVXo2iVXIrwvq8NjIlwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCVIVk/ULd8Wti4wYSUvB1fVPte1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81 MzY5MWI4NS04NDI4LTQyZTUtOTJhMS00ZjRhNmM4MDhmMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzUzNjkxYjg1LTg0MjgtNDJlNS05 MmExLTRmNGE2YzgwOGYxZS81MzY5MWI4NS04NDI4LTQyZTUtOTJhMS00ZjRhNmM4 MDhmMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADM7v8wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhSUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACW4r85z3EdEyXcEybcwrQD5sdS6ul2MmsrvybNP8zRnma7K wJI2+OBOHg+IiAq5klSKze5lZn4d9kHLoJexzFyeR0MmHynVedQp4EFEZE0G6nKD r/HN+zJ3qwHKizndFKxqwQZoPJCBJISYEO5CJWsVlYyM97yoFDU1bWqOO9pAFXo2 HsUXMZU5gpEo48G5Isvno9Ob1FBEp2YQcU/mlnXT8Wm1rCy7KHKTD6DcEmLrZIYn I40BW63XGX3hzPGn+p4+ByMq18nl3SgpSybgk4fsG+BoobLNLQcTid7qRSstXykW 4jE17TI6hFtw95r9K5mbV+Piek1tPR9Tt/2/q2o= -----END CERTIFICATE-----Generated at Sun Sep 20 22:01:51 2026 by rpki-client